CVE-2026-48906

Published: May 27, 2026

Modified: May 27, 2026

PUBLISHED

The vulnerability in the Tassos Framework Plugin allows users to delete arbitrary files on the affected sites.

Vendor	Product	Versions
tassos.gr	Novarain/Tassos Framework (plg_system_nrframework)	affected `1.0.0-6.0.1`
tassos.gr	Convert Forms	affected `1.0.0-4.4.12` affected `5.0.0-5.1.5`
tassos.gr	EngageBox	affected `1.0.0-6.3.11` affected `7.0.0-7.1.1`
tassos.gr	Google Structured Data	affected `1.0.0-5.6.11` affected `6.0.0-6.1.9`
tassos.gr	Advanced Custom Fields	affected `1.0.0-2.8.12` affected `3.0.0-3.1.3`
tassos.gr	Smile Pack	affected `1.0.0-1.2.6` affected `2.0.0-2.1.0`
tassos.gr	Tassos Code Snippets	affected `1.0.0`
tassos.gr	MailChimp Auto-Subscribe	affected `1.0.0-5.0.5` affected `5.1.0-5.2.0`

product

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.